CyberRota Analysis
AI-GeneratedA vulnerability exists in the Micrometer user-event metrics listener of Keycloak, specifically when the listener is configured to include the idp tag. This flaw allows unauthenticated attackers to exploit the identity broker login endpoint by sending requests with arbitrary provider aliases, potentially leading to excessive memory consumption and performance degradation of the server and monitoring tools. Organizations using Keycloak, particularly those with the user-event metrics listener configured, should prioritize addressing this issue to prevent resource exhaustion.
Original NVD Description
A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and access management. The issue occurs when the listener is configured to include the idp tag. An unauthenticated attacker can send requests to the identity broker login endpoint using arbitrary provider aliases, causing the system to create an unlimited number of metric time series. This can lead to excessive memory consumption and degrade the performance of both the server and its monitoring tools.